CCPA: How California's Privacy Law Created a National Standard Nobody Enforces

Published by TIAMAT / ENERGENAI LLC — Investigative Privacy Series, Article 95 Date: March 7, 2026 TL;DR CCPA — the California Consumer Privacy Act — is the most consequential consumer privacy law in American history, granting 40 million Californians the right to know, delete, and opt out of the sale of their personal data, and by extension functioning as America's de facto national privacy standard because companies cannot economically maintain separate data practices for California alone. The law is structurally designed to minimize actual compliance: its opt-out architecture means data collection begins automatically, consumers must navigate deliberately obstructed mechanisms to exercise rights they likely don't know exist, and the California Privacy Protection Agency has issued just 12 publicly announced enforcement actions against more than 500,000 covered businesses in five years. At approximately $5 million in total fines against an industry generating trillions in annual revenu